| import { checkEncCryptoKey } from './crypto_key.js'; | |
| function checkKeySize(key, alg) { | |
| if (key.algorithm.length !== parseInt(alg.slice(1, 4), 10)) { | |
| throw new TypeError(`Invalid key size for alg: ${alg}`); | |
| } | |
| } | |
| function getCryptoKey(key, alg, usage) { | |
| if (key instanceof Uint8Array) { | |
| return crypto.subtle.importKey('raw', key, 'AES-KW', true, [usage]); | |
| } | |
| checkEncCryptoKey(key, alg, usage); | |
| return key; | |
| } | |
| export async function wrap(alg, key, cek) { | |
| const cryptoKey = await getCryptoKey(key, alg, 'wrapKey'); | |
| checkKeySize(cryptoKey, alg); | |
| const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']); | |
| return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, cryptoKey, 'AES-KW')); | |
| } | |
| export async function unwrap(alg, key, encryptedKey) { | |
| const cryptoKey = await getCryptoKey(key, alg, 'unwrapKey'); | |
| checkKeySize(cryptoKey, alg); | |
| const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, cryptoKey, 'AES-KW', { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']); | |
| return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek)); | |
| } | |